Patch Times 12

After tomorrow, your Microsoft software is going to look like the tires on the Three Stooges' car -- full of patches!

Microsoft is releasing a full dozen patches tomorrow, covering everything from Office to Access and nearly all current versions of Windows (for some reason, Windows Me and DOS 6.0 don't get any fixes).

While most patches cure that old bugaboo, the Remote Code Execution, no less than three try to keep hackers from stealing information.

More

Posted by Doug Barney on 08/11/20080 comments


Mailbag: Would You Use Linux?

Last week, after word came out that IBM was working to build Linux-only PCs , Doug asked readers whether they'd find room for these things in their own shops. Here are some of your responses:

You asked, why would you use Linux in your shop? Cost. It has crossed my mind for the purpose of thin-clients doing basically nothing but booting into Linux and loading RDC software to connect to a Windows Terminal Server. No need to pay for big, beefy machines and Windows client licenses if the employee is mostly remote, but needs a workstation when they come to the office, and would use their remote desktop anyway because that is where all their files are and it is configured to their liking.
-Timothy

If the environment I am in changes, yes. Vista is already banned from the network. We run Solaris, Linux, 2000, XP and 2003 server with some 2000 servers still around, and at least one Mac OS X. A Linux desktop (if we can buy it from Dell as it is a state requirement all hardware must be bought from Dell) yes, but no Notes. It would need to conform to the Oracle, Outlook, Office standard. There were several Red Hat Linux desktops in use fairly recently. I need to run a program that is only written for Windows, but I can connect to another machine or virtualize it to get around that. When I need to connect from home, I use OS X and VPN in with a remote client.
-Stewart

Not today. And not from IBM. I was an IT professional before the IBM PC was released. I know the stories. IBM would love not to have to sell Windows to its loyal customers who want personal workstations for their non-technical workforce, but that will not happen until someone invests some serious money to position Linux for the non-technical desktop. Make Linux truly plug-n-play (as Windows is on most any OEM system) and IBM might stand a chance, but the costs far exceed the return IBM is ever going to get to provide its customers with commodity desktops. Unlike most Linux vendors, IBM has the resources to do this but they just don't have the stomach for it.

Could I be wrong? Sure, I could! Would I switch to Linux? Sure, if I was convinced that it would meet my needs better than Windows -- but that selling job is up to IBM and its partners. They talk a good story but I doubt they will come through.
-Marc

There are too many wild Linux horses in the race to pick one of the winners. The only common Linux direction is "anything but Microsoft or Sun." Anarchy may work to bring down the "ruling class," but it doesn't work when you need to assemble a system to bring order to the Linux chaos. It will take an IBM or HP or someone else to bring the Linux chaos to an end and give it a directon and a future. I fear the disarray that stalled Unix is awaiting Linux.

You may have the kid down the street mow your lawn rather than a landscaping company to save a few bucks, but when you make a business investment, you invest based on a clearly defined investment strategy with established history, focused strategy direction and an ultimate goal. If you want to gamble, there is always horse racing or today's Linux.

-Dan

More

Posted by Doug Barney on 08/11/20080 comments


Patch Tuesday Enhanced

The second Tuesday of every month, Microsoft releases and publicizes a series of patches. It also gives a basic severity level, such as low to critical. Starting in October, Microsoft will give far more information about the actual threat these vulnerabilities pose, helping IT figure out which patches have to be done pronto and which can wait a bit.

Microsoft is also hoping to work more closely with other security firms to find and fix flaws. That's good news, but most of the security companies I've talked to already report a good relationship with the folks up in Redmond. Not sure how much that's changed, now that Microsoft competes with so many of them.

More

Posted by Doug Barney on 08/07/20080 comments


SQL Server: We Have Lift-Off...Almost

I'm not exactly sure how Microsoft ships products. This week, Microsoft announced that SQL Server 2008 is released to manufacturing . This is such an exciting event that it comes with its own acronym, RTM. That's TWU, or Totally Weird and Unnecessary.

So it's Aug. 7, 2008, and SQL Server code has been sent to the manufacturers, who'll get it in your hands by the middle of next month, more than a month later. What exactly is the manufacturer doing? It could be making boxes and burning CDs, but that's SOS (So Old-School). But these days, it's all about the download. So what's taking so long? Maybe you can tell me at [email protected].

More

Posted by Doug Barney on 08/07/20080 comments


Mailbag: Search Engines of Choice

Readers share their their favorite non-Google search engines:

I use Ask.com for two reasons. One, context is king for me and Ask gives me better context than Google. Two, I don't appreciate the way Google says "Don't be evil" and is. Three, Google has no product and is therefore a parasite relying on advertising revenues to subject users to adverts they don't want to see. Four...

Did I say two? "Don't be numerate.
"
-Christopher

The first is/was still the best: AltaVista. Allowed multiple user parsing (date range, near, etc.).
-Anonymous

Try Mamma.com. While it isn't a direct search engine but rather a meta search engine (and it displays Google results), you should at least check it out. It may not find as many copies of the same whitepaper, but it does a good job of weeding out the junk and returning only the pearls.
-Donna

One of my pet peeves about Google is that while sure it can find stuff, it just can't count. I have frequently tested Google's hit counts, and they are almost always overstated by one or two orders of magnitude. For a company that creates no content (as you frequently point out) and which built its whole reputation on search and uppity technology, is this really OK? It feels like fraud to me.

Looking at Google's hit counts always reminds me of that scene in "Raiders of the Lost Ark" where Indiana Jones says to Sallah: "I said NO camels. That's FOUR camels. Can't you count?"
-Chris

More

Posted by Doug Barney on 08/07/20080 comments


Microsoft Wants You

Are you an experienced server manager who cares about usability, have two hours to spare for a "study session" and, lastly, can make it up to Redmond to meet with Microsoft? If so, Microsoft wants you to help test out a new product .

Microsoft won't yet say what the product is, but if you sign up as a tester, drop me a line and let me know at More

Posted by Doug Barney on 08/07/20080 comments


IBM's Cloudy Future

IBM has plenty of cash to throw around. After all, with $98 billion in yearly revenues, it's the second-largest computer company in the world (HP is now No. 1 with some $104 billion in annual sales, while Microsoft barely rates at only $51 billion).

So when IBM announces that it's spending $360 million to build two new cloud computing datacenters, it's really just chump change.

More

Posted by Doug Barney on 08/06/20080 comments


Zimbra's New Outlook Alternative

We wrote about Zimbra and other open source alternatives a year-and-a-half ago here .

The company, now owned by Yahoo, has a new alternative to Outlook: the Zimbra Desktop. The software, now in beta, works with Yahoo e-mail and also supports to-do lists, calendars, contacts and documents. Check out a First Look here

Posted by Doug Barney on 08/06/20080 comments


IBM's New Desktop Push

Usually, this newsletter is all about Microsoft. Today, though, it's mostly about IBM with a little Yahoo tossed in. So let's get started.

IBM once owned a big chunk of the desktop. There was the original IBM PC, PC-DOS and finally OS/2, which almost became the de facto PC operating system.

Since then, IBM has slowly lost ground. OS/2 is dead, as is any IBM-made PC. It has no real PC OS and, after buying Lotus, both SmartSuite and Notes have lost more market share than Pet Rocks and Pokemon put together.

More

Posted by Doug Barney on 08/06/20080 comments


Apple Gets DNS Security Religion

In the last week or so, Microsoft released a patch to fix a DNS vulnerability in its software. Shortly thereafter, an AT&T DNS server was compromised -- reportedly the first DNS attack ever .

Apple is feeling the heat, as well, and this week released a patch designed to cure its DNS security ills. This is all well and good, except some experts claim the fix is incomplete and doesn't fully protect clients.

Posted by Doug Barney on 08/05/20080 comments


IT Gone Bad

This is admittedly an old story, but it still serves as a warning for those in IT to not trust others in IT, and for IT not to abuse its access to corporate and personal information. According to a survey by Cyber-Ark, a third of IT pros spy on company employees .

I've met with hundreds of security companies and I'd always ask the same question: What are you doing to prevent internal security breaches? They'd all wax on about how their software keeps employees from getting at private information. Then I'd say, "But what about IT itself? What do you do to keep IT insiders from breaching?"

More

Posted by Doug Barney on 08/05/20080 comments


PHP Not So Safe

PHP may be a popular Web scripting language, but it's far from safe, according to research just published by IBM. Tens of millions of Web sites and over a million Web servers are driven by PHP, making its vulnerabilities cause for concern.

So the next time your Web weenie kids you about patching Windows, ask what he's done to secure PHP lately.

Posted by Doug Barney on 08/05/20080 comments


Subscribe on YouTube